xlWin provides permission based marketing services to major national and international brands. Our clients receive sales leads from consumers who have given their consent to be contacted.
If you would like to withdraw the consent that you have previously given on one of our sites please send an email to [email protected]
xlWin collects demographic and lifestyle data directly from consumers who visit our competition websites. Visitors to our competitions and surveys engage with specific brands or categories of products and services. If a consumer thus indicated to hear from a brand we will provide this information to the respective client. We may also provide contact data and other information to clients if the consumer has given consent when signing up on the competition website.
xlWin complies with the relevant New Zealand laws and regulation regarding data protection, privacy and anti-spam, which govern how it must handle personal information (Privacy Regulations).
xlWin collects personal information from consumers when they participate in one of our competitions and surveys. We collect personal information about you, your contact details, your interests, lifestyle preferences, products or services you may be interested to hear about or brands from which you may like to rececive communications. Personal information we collected may include your name, date of birth, gender, address, e-mail address, phone number, IP address and any interests which are communicated in surveys.
We may also use cookies and other methods to collect information about you when you visit our websites. This information may be added to the profile that you entered through one of our surveys. A cookie is a small piece of computer code which remains on your computer and contains information which helps us identify your browser and previous information viewed in relation to our website. When you visit our webpage the cookie records certain details including the date, time and advertising content of that site. The information we collect in this way may include your Internet service provider’s address, date and time of your visit, pages accessed and type of browser used. If you do not want us to use cookies then you can easily stop them, or be notified when they are being used, by adopting the appropriate settings on your browser. If you do not allow cookies to be used, some or all of our website might not be accessible to you.
xlWin and our partners and clients use the personal information we collect for various purposes, including:
to send you information, offers and promotions about products and services based on your preferences by mail, phone, SMS, instant messaging, web push notification or email;
to enable brands to communicate with you based on the permissions and preferences you have selected in our surveys;
to administer our database of personal information including improving and personalising marketing, updating the record we keep of you;
to provide information to third parties to enable them to contact you with relevant and interesting offers via commercial communications; or for them to use the data to match or link it with their own data; or for on-selling the data to third parties for marketing purposes;
to perform market analysis and research;
to improve services, websites and content provided to visitors of webpages, apps and advertising including through the matching of data;
to provide your information to third parties and enable them to use your data to develop products used for fraud prevention and/or identity verification purposes.
You may opt-out of receiving any communicaton from xlWin at any time simply by submitting a request by email to [email protected]. You can opt out of receiving any communication from a third party to whom we provide your information by contacting that third party.
We will take reasonable steps to make sure that your personal information is accurate and up to date. You can access your personal information or make a complaint or request that your personal information is corrected or removed and not used any further. If we correct your personal information that has also been disclosed to a third party we will take reasonable steps to inform the third party of the correction. Please send us an email to [email protected]. We will use reasonable efforts to respond and take action within 14 days. We will take such steps that are reasonable in the circumstance to protect personal information from misuse interference and loss. If we no longer need your personal information, and it is not otherwise required by law, we will take reasonable steps to destroy the information and de-identify it.
We may disclose personal information to any person or authority where we are required to by law.
We disclose personal information to our clients and advertisers, third party agents, service providers and contractors only for purposes consistent with the reasons for collecting the information set out in this Privacy Policy. Other than set out in our Privacy Policy, we will not disclosure your personal information without your prior permission.
We could share your data or derivatives of your data with third party independent data controllers and processors, including resellers and distributors, for the purpose of identity verification. These third parties provide identity verification services, such as the verification or validation of the identity of individuals for the purposes of, but not limited to, anti-money laundering regulations, age verification, anti-fraud processes and pre-employment checks.
We may share your personal information with our partner WINR Data Pty Ltd (WINR) and their global partners for the purposes of:
Fraud Prevention - preventing others from misusing your personal information. This may involve identity verification for anti-fraud, anti-money laundering, anti-crime, asset recovery, debt collection and reuniting individuals with unclaimed assets; and
Digital Advertising - providing personalised advertising and content that is relevant to you. This may involve identity resolution for data analysis, matching and linkage.
WINR and their global partners will process and retain your personal information for as long as necessary for these specific purposes and on the lawful bases of legitimate interests and consent, where required.
You can submit a request to exercise any of your privacy rights to the Data Protection Officer at WINR https://www.winrdata.com/privacy-policy/
We hold all personal information that you submit to us in accordance with the Privacy Regulations. Your personal information is held and stored in secure servers, which are located in Singapore and the European Union and operated by our parent company. Our server provider meets all current standards corresponding to protecting the privacy of your personal information and we take reasonable steps to ensure compliance with the Privacy Regulations as if the server is located in New Zealand. We do not assume responsibility for the publication of the information due to errors during transmission or due to unauthorised access by third parties.
We may transfer your data to third countries (outside New Zealand) whose laws provide a different standard of protection than that provided under New Zealand law. We will take suitable safeguards for transferring your data according to the Privacy Act 2020 and other relevant legislation. If you would like to receive a copy of our safety measures, you can contact us via email. Some of the recipients of the personal data that you provide may be based overseas, including in Singapore, the EU, Canada, Australia and the US. Before we disclose personal information to local or overseas recipients we take reasonable steps to ensure they have privacy practices that are at least as stringent as the New Zealand Privacy Regulations. You agree to the disclosure of your personal information on that basis.
xlWin works to ensure that all personal information about you that we collect, use or disclose is accurate, complete and up-to-date. We do this by collecting information directly from you. We are committed to ensuring security of personal information that we hold. We implement a range of measures to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. xlWin holds personal information electronically on secured enterprise servers appropriate to hold personal information.
Your rights under the Privacy Act 2020
The right to be informed. You have the right to know what personal information is being collected, the purpose of the collection, how it will be used, who it will be shared with, and how long it will be kept.
Right to access: You can request to see the personal information an organization holds about you and can ask for a copy. Requests must be responded to within 20 working days.
Right to correction: You can request that inaccurate or incomplete information be corrected. If the organization doesn't make the change, they must attach your statement of correction to the information.
Right to limit use and disclosure: Individuals have the right to place limits on how their information is used and disclosed, such as restricting its use for marketing or other purposes.
Right to security: Organizations are required to keep personal information safe and secure from unauthorized access, use, or disclosure.
We may change the Privacy Policy to reflect changes in our practices and privacy regulation. Any changes will come into effect when an updated Privacy Policy is posted to our website.
This Privacy Policy was last updated on 2025-12-24